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DETAILED ACTION 

Claims 1-63 have been considered. 

Title 

5 

A new title is suggested by the examiner. The current title "Document Transmission Techniques 
I" is not descriptive. The examiner suggests "Authentication Method in a Printing Environment". A new 
10 title is suggested but not required. 

Claim Objections 

Claim 21 is objected to because of the following informalities: the examiner believes "transmitting" 
as referred to in part c) should be "receiving". The system is disclosed so that the printout station 
15 receives a document and securely retains it. The examiner assumes the applicant nieant "receiving and 
securely retaining" the document. Appropriate correction is required. 

Claim Rejections - 35 USC § 102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for 
20 the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

25 

Claims 1-2,5-6,8-11,13-18,41-43.46-48,54-56,58, and 60-62 are rejected under 35 U.S.C. 102(b) 
as being anticipated by Mandelbaum, European Patent Application Publication No. 0671830 A2. 



30 



As per claim 1, the applicant describes a method of delivering a digital document to an intended 
recipient at a printout station comprising the following limitations which are met by Mandelbaum: 
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a) receiving and securely retaining a transmitted document and a transmitted independently 
verifiable data record of the intended recipient at a printout station (Col 6, lines 40-44; Col 2, lines 9-26); 

b) obtaining a first token of the intended recipient (Col 2, lines 50-53); 

c) requesting proof of the intended recipient's identity at the printout station using data in the 

5 independently verifiable data record of the intended recipient (Col 6, lines 56-58; Col 7, lines 1-6; Col 5, 
lines 49-58; Table 10 of Fig 4); 

d) releasing the document when the intended recipient has proven their identity by use of a 
second token that is uniquely related to the first token (Col 7, lines 27-47); 

Regarding part a), messages sent to the printout station comprise an unrestricted access part 
10 which identifies the intended recipient and is the independently verifiable data record (Col 2, lines 9-26) 
and a restricted access part which is securely stored in memory until the intended recipient has proven 
his identity (Col 2, lines 9-26; Col 6, lines 40-44). 

Regarding parts b) and d), the applicant writes that the first token is a public key when public-key 
infrastructure is being used (Applicant: Page 4, lines 15-16). Mandelbaum writes that the sender uses a 
1 5 public key, or first token, of the recipient in order to encrypt a message which can only be decrypted by 
the use of the recipient's private key, or second token, which is uniquely related to the second token (Col 
7, lines 27-47). The recipient therefore obtains the first token since the message is encrypted using the 
first token. The applicant should also note that in a second embodiment which is less secure, the sender 
can use his private key to encrypt a message which can only be decrypted using the sender's public key. 
20 Regarding part c), the lines and figure referenced above illustrate that the intended recipient must 

prove his identity to the fax machine (which uses the stored independently verifiable data record obtained 
in the header portion of the message) in order to decrypt and access the restricted message portion. 



25 



As per claims 2 and 42, the applicant describes the method of claims 1 and 41, which are 
anticipated by Mandelbaum (see above), with the following limitation which is also anticipated by 
Mandelbaum: 
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Wherein the transmitted document is a fax document and the printout station comprises a fax 
machine (Col 3, lines 15-17). 

As per claims 5 and 46, the applicant describes the method of claims 1 and 41, which are 
anticipated by Mandelbaum (see above), with the following limitation which is also anticipated by 
Mandelbaum: 

Wherein the retaining step comprises storing the received document in memory without printing • 
out a copy of it on receipt (Col 6, lines 40-44). 

As per claims 6 and 47, the applicant describes the method of claims 5 and 46, which are 
anticipated by Mandelbaum (see above), with the following limitation which is also anticipated by 
Mandelbaum: 

Wherein the releasing step comprises printing out a copy of it (Col 7, lines 48-56); 

As per claim 8, the applicant describes the method of claim 1 , which is anticipated by 
Mandelbaum (see above), with the following limitation which is also anticipated by Mandelbaum: 

Wherein the releasing step is carried out when the intended recipient has presented a portable 
data carrier holding the second token to the printout station and has transferred data to prove their 
identity (Col 7, lines 27-56); 

The portable data carrier, or smart card, must be presented to the smart card interface to prove 
their identity. Also, the smart card holds the intended recipient's private key, or second token, which is 
used to decrypt the encrypted message. 

As per claims 9 and 48, the applicant describes the method of claims 8 and 41, which are met by 
Mandelbaum (see above), with the following limitation which is also anticipated by Mandelbaum: 



10 
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Wherein the releasing step further comprises the intended recipient entering a verifiable security 
identifier into the printout station to establish that they are the legitimate owner of the portable data carrier 
(Col 4, lines 21-24); 

The identifier is the PIN code. 

As per claim 10, the applicant describes the method of claim 8, which is met by Mandelbaum (see 
above), with the following limitation which is also anticipated by Mandelbaum: 

Wherein the portable data carrier is a smart card and the printout station comprises a smart card 
reader (Col 4, lines 9-1 3). 



As per claim 1 1 , the applicant describes the method of claim 1 , which is met by Mandelbaum (see 
above), with the following limitation which is also anticipated by Mandelbaum: 

Wherein the obtaining step comprises extracting the first token transmitted with the document and 
the data record (Table 404 of Fig 4); 
15 As one can see in the table, the fax machine is able to extract information about the first token 

from the message and display the information as a flag which is set when the message is encrypted with 
the intended recipient's public key. 

As per claim 13. the applicant describes the method of claim 1, which is met by Mandelbaum (see 
20 above), with the following limitation which is also anticipated by Mandelbaum: 

Further comprising carrying out an on-line check of the validity of the intended recipient's 
independently verifiable data record (Col 4, lines 17-24); 

The applicant writes that the smart card authentication method is preferably the AT&T CSS user 
authentication system "in which the user calls the system" (Col 4, lines 17-19). Since the user is calling 
25 the system for authentication, an online authentication is taking place. 
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As per claim 14, the applicant describes the method of claim 1, which is met by Mandelbaum (see 
above), with the following limitation which is also anticipated by Mandelbaum: 

Further comprising instructing a third party to carry out an on-line check of the validity of the 
intended recipient's independently verifiable data record (Col 4, lines 17-24); 
5 Since the authentication system is one in which the user calls into the system, it is reasonable to 

assume that a third party validates the intended recipient. 



As per claims 15 and 16, the applicant describes the method of claims 13 and 14, which are met 
by Mandelbaum (see above), with the following limitation which is also anticipated by Mandelbaum: 
1 0 Wherein the releasing step further comprises only releasing the document if the validity of the 

independently verifiable data record has been confirmed as a result of the check (Col 4, lines 23-24). 

As per claims 1 7 and 43, the applicant describes the method of claims 1 and 41 , which are met 
by Mandelbaum (see above), with the following limitation which is also anticipated by Mandelbaum: 
15 Wherein the first and second tokens comprise private and public encryption/decryption keys of 

the intended recipient (Col 2, lines 50-53; Col 7, lines 27-32); 

The use of the recipient's public key, or first token, is described (Col 2, lines 50-53) as well as the 
use of the intended recipient's private key, or second token, (Col 7, lines 27-32). 



20 As per claim 18, the applicant describes the method of claim 1, which is met by Mandelbaum (see 

above), with the following limitation which is also anticipated by Mandelbaum: 

Wherein the transmitted document is encoded and the method further comprises decoding the 
received document once the intended recipient has proven their identity (Col 7, lines 3-6; Col 7, lines 27- 
56). 



25 
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As per claim 41, the applicant describes a device for delivering a digital document to an intended 
recipient comprising limitations a) through d) which are met by Mandelbaum in the rejection of claim 1 
(see above) and the following additional limitation which is also met by Mandelbaum: 

e) a portable data carrier reader for receiving information from a portable data carrier (Col 4, lines 

9-13). 

As per claim 54, the applicant describes a method of delivering a digital document from a first 
station via a communications network to an intended recipient at a second station, the method comprising 
limitations d) through g) which are met by Mandelbaum in the rejection of claim 1 (see above) and the 
following additional limitations which are also met by Mandelbaum: 

a) obtaining details of the intended recipient, including an independently verifiable data record of 
the intended recipient at the first station (Col 5, lines 5-11); 

b) determining prior to transmission of the document whether the second station is one which is 
arranged to implement the present method (Col 5, lines 5-11); 

c) transmitting the document and the independently verifiable data record of the intended 
recipient to the second station (Col 5, lines 29-33); 

Regarding part b), the applicant should note that it is inherent in the art that the address book 
provides a way of determining whether the second station is one which is arranged to implement the 
present method. Otherwise, it wouldn't make sense to keep an address book of intended recipients and 
the public keys if the intended recipients had no way to decrypt the received message according to the 
present system. 

As per claims 55 and 61, the applicant describes the method according to claims 54 and 60, 
which are met by Mandelbaum (see above), with the following limitation which is also met by 
Mandelbaum: 

Further comprising obtaining details of the intended recipient including the independently 
verifiable data record prior to transmitting the document (Col 5, lines 5-27). 
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As per claims 56 and 62, the applicant describes the method according to claims 55 and 61, 
which is met by Mandelbaum (see above), with the following limitation which is also met by Mandelbaum: 
Wherein the step of obtaining details comprises obtaining the independently verifiable data record 
5 from a central database storing many possible intended recipients' details (Col 5, lines 9-11). 



As per claim 58, the applicant describes the method of claim 54, which is met by Mandelbaum 
(see above), with the following limitation which Is also met by Mandelbaum: 

Further comprising encoding the document prior to transmitting it to the second station and 
10 decoding the received document once the intended recipient has proven their identity (Col 5, lines 33-40; 
Col 7, lines 27-44); 

The use of encoding or encrypting the document is described (Col 5, lines 33-40) as is the use of 
decoding or decrypting the document (Col 7, lines 27-44). 

15 As per claim 60, the applicant describes a method of delivering a digital document from a first 

station via a communications network to an intended recipient at a second station comprising limitations 
b) through f) which are met by Mandelbaum in claim 54 (see above) and the following additional limitation 
which is also met by Mandelbaum: 

a) obtaining details of the intended recipient, including an independently verifiable data record of 

20 the intended recipient at the first station, encoding the document using encryption techniques prior to 
transmitting it to the second station (Col 5, lines 5-10; Col 5, lines 33-40). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 

25 rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
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invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5 Claims 3-4,44-45, and 49-53 are rejected under 35 U.S.C, 103(a) as being unpatentable over 

Mandelbaum in view of Lundblad, European Patent Application Publication No. 0542703 A1. 



As per claims 3-4 and 44-45, the applicant describes the method of claims 1 and 41, which are 
met by Mandelbaum (see above), with the following additional limitation which is met by Lundblad: 
10 Wherein the retaining step comprises printing out the document as received and placing it in a 

locked compartment (Col 3, lines 3-12; 14 of Fig 1); 

Mandelbaum discloses all the limitations of the independent claims 1 and 41 . However 
Mandelbaum fails to disclose the use of a locked compartment for storing the documents. 

Lundblad discloses a fax transmission apparatus which includes the use of a locked compartment 
15 where documents can be stored until opened by the intended recipient who proves his identity by using a 
physical key to unlock the compartment. It would have been obvious to one of ordinary skill in the art at 
the time the invention was filed to incorporate the ideas of Lundblad with those of Mandelbaum because 
the incorporation of the two systems provides another way to securely retain documents until an 
authorized person has access to receive them. 
20 Regarding claims 4 and 45, only an authorized person who has the proper key can release the 

documents from the locked compartment. 



As per claim 49, the applicant describes a device for delivering a digital document to an intended 
recipient, the device comprising limitations a) through d) which are met by Mandelbaum (see the rejection 
25 for claim 1) with limitation e) which is met by Lundblad (see the rejection for claim 3). 

As per claims 50-53, the applicant repeats claims that have already been rejected by 
Mandelbaum but are now rejected under U.S.C. 103(a) in light of Mandelbaum in view of Lundblad 
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because they depend on independent claim 49 which is rejected by Mandelbaum in view of Lundblad. 
The applicant should note that claim 50 corresponds to claim 4, claim 51 corresponds to claim 2, claim 52 
corresponds to 17, and claim 53 corresponds to claim 9. 

5 Claims 7,12,57, and 63 are rejected under 35 U.S.C. 103(a) as being unpatentable over 

Mandelbaum. 

As per claim 7, the applicant describes the method of claim 1, which is met by Mandelbaum (see 
above), with the following limitation which is also met by Mandelbaum: 
10 VVherein the requesting step comprises requesting supply of data encoded with the second token 

which can be decoded with the first token (Col 6, lines 56-58; Col 7, lines 1-6); 

Mandelbaum discloses that an intended recipient's second token, or private key, is stored on a 
smart card which is authenticated at the fax machine. Mandelbaum also discloses that the fax machine 
has a way of extracting information in the header which discloses that the sender is using the recipient's 
1 5 public key (Table 404 of Fig 4). 

However, Mandelbaum never discloses that the authentication of the smart card is done via 
requesting data encoded with the second token which can be decoded and verified by the first token. It 
would have been obvious to one of ordinary skill in the art at the time the invention was filed to 
incorporate this authentication method because this is an authentication method which could be easily 
20 implemented in the system. 

As per claims 12,57, and 63, the applicant describes the method of claims 11,54, and 60, which 
are met by Mandelbaum (see above), with the following additional limitation which is also met by 
Mandelbaum: 

25 Wherein the intended recipient's independently verifiable data record is provided as an intended 

recipient's digital certificate (Col 2, lines 38-40); 
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Mandelbaum discloses all the limitations of claim 11. While Mandelbaum discloses the need for 
authenticating the intended recipient, he does not disclose the use of a digital certificate sent from the 
sending fax machine. One method Mandelbaum proposes is having the user insert his smart card into 
the fax apparatus to authenticate the user's identity. 
5 It would be obvious to authenticate the user's identity through a certificate in light of 

Mandelbaum's system. In such a system, data on the smart card could be checked with data on the 
certificate to authenticate the user's identity. 



Claims 19-37, and 59 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
10 Mandelbaum in view of Auerbach, European Patent Application Publication No. 0798892 A2. 



As per claims 19 and 59, the applicant describes the method of claims 18 and 58, which are 
anticipated by Mandelbaum (see above), with the following limitation which is anticipated by Auerbach: 

Wherein the transmitted document has been encoded using enveloping technique and the 
15 decoding step comprises using enveloping decryption techniques (Col 3, lines 5-10; Col 3, lines 26-30); 

Mandelbaum describes all the limitations of claim 18. However. Mandelbaum fails to disclose the 
use of enveloping encryption and decryption techniques. 

Auerbach discloses a method for the creation and distribution of digital documents using the 
methods and techniques of secure cryptographic envelopes (Col 1, lines 3-8). Cryptographic envelopes 
20 provide an extra layer of security for messages because they comprise superencrypting a message. It 
would have been obvious to one of ordinary skill in the art at the time the invention was filed to 
incorporate the ideas of Auerbach with those of Mandelbaum so that the transmitted message is encoded 
using enveloping technique for extra security. 



25 



As per claim 20, the applicant describes the method of claim 19, which is anticipated by 
Mandelbaum in view of Auerbach (see above), with the following limitations which are anticipated by 
Auerbach: 
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a) the transmitted document has been encoded with a session key and the session key has been 
encrypted with the first token (Col 2, lines 56-58; Col 3, lines 1-10); 

b) the transmitting step comprises transmitting the encrypted session key to the printout station 
(Col 2, lines 56-58; Col 3, lines 1-10); 

5 c) the decoding step comprises decrypting the encrypted session key with the second token and 

decoding the received document with the decrypted session key (Col 3, lines 26-30); 

Regarding part a), the transmitted document is encoded with a session key which corresponds to 
the part encryption key disclosed by Auerbach. Auerbach further discloses that the part encryption key, 
or session key, is encrypted using a first public key, which would correspond to the intended recipient's 
10 public key if the ideas of Auerbach were combined with the ideas of Mandelbaum. 

It would have been obvious to one of ordinary skill in the art at the time the invention was filed to 
incorporate the ideas of Auerbach with those of Mandelbaum in light of the fact that superencryption via a 
session key and a public key provides an additional layer of security. 

1 5 As per claim 21 , the applicant describes a method of delivering a digital document to an intended 

recipient at a printout station comprising limitations a) and c) through e) which are met by Mandelbaum 
(see rejection for claim 1) and limitations b) and e) which are met by Auerbach (see rejection for claim 
20). 

20 As per claims 22 and 25-37. the applicant repeats claims 2 and 5-17 which have already been 

rejected by Mandelbaum (see above). Claims 22 and 25-37 are rejected under U.S.C. 103(a) because 
they are dependent on the system of claim 21 which is met by Mandelbaum in view of Auerbach (see 
above). 

25 Claims 23 and 24 are rejected under 35 U.S.C. 103(a) as being unpatentable over Mandelbaum 

in view of Auerbach in further view of Lundblad. 
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Claims 23 and 24 are repeats of claims 3 and 4 which are rejected by Mandelbaum in view of 
Lundblad (see above). Claims 23 and 24 must be rejected under Mandelbaum in view of Auerbach in 
further view of Lundblad because the claims depend on claim 21 which is met by Mandelbaum in view of 
Auerbach. 

5 

Claims 38 and 39 are rejected under 35 U.S.C. 103(a) as being unpatentable over Mandelbaum 
in view of Auerbach in further view of Schneier (Schneier, Bruce. Applied Cryptography. 1996. John Wiley & 
Sons, Inc. Second Edition. Pages 68-73). 

10 As per claim 38, the applicant describes the method of claim 21 , which is anticipated by 

Mandelbaum in view of Auerbach (see above), with the additional limitation that the system involves a 
plurality of users and not just one user which is met by Schneier (pages 68-73). 

Mandelbaum in view of Auerbach describe all the limitations of claim 21 . However Mandelbaum 
in view of Auerbach fails to disclose the use of a plurality of users. Schneier discloses a secret splitting 

15 method whereby more than one intended recipient is needed to be present to allow a process to happen 
(page 70-71). 

It would have been obvious to one of ordinary skill in the art at the time the invention was filed to 
combine the ideas of Schneier with those of Mandelbaum in view of Auerbach in the case where more 
than one recipient needs to prove his identity at the printing station for a document to be printed. 

20 

As per claim 39, the applicant describes the method of claim 38, which is anticipated by 
Mandelbaum in view of Auerbach in further view of Schneier, with the following additional limitation which 
is also met by Schneier: 

Wherein the transmitted document or a session encryption/decryption key of the transmitted 
25 document has been sequentially encrypted with each of the first tokens of the intended recipients in a 
given order and the processing step comprises sequentially decrypting the transmitted document or a 
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session encryption/decryption key with each of the second tokens of the intended recipients in the 
reverse of the given sequential order (page 68-69). 

Mandelbaum in view of Auerbach in further view of Schneier describe all the limitations of claim 
38, Schneier also discloses the use of multiple key cryptography where a message can be encrypted 
5 with more than one public key so that the intended recipients need to present their private keys in a 
particular order to decrypt a message. 

It would have been obvious to one of ordinary skill in the art at the time the invention was filed to 
combine the ideas of Schneier with those of Mandelbaum in view of Auerbach in the case where more 
than one recipient needs to prove his identity at the printing station for a document to be printed, 

10 

Claims 40 are rejected under 35 U.S.C. 103(a) as being unpatentable over Mandelbaum in view 
of Schneier. 

As per claim 40, the applicant describes a method of delivering a digital document which is met 
15 by Mandelbaum (see the rejection for claim 1) with the additional limitation of incorporating the use of a 
plurality of intended recipients which is met by Schneier (see the rejection for claim 38). 



Any inquiry concerning this communication or earlier communications from the examiner should 
20 be directed to Kevin Schubert whose telephone number is (571) 272-4239. The examiner can normally 
be reached on M-F 8:00-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Andrew Caldwell can be reached on (571) 272-3868. The fax phone number for the organization where 
this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) 
at 866-217-9197 (toll-free). 
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